This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/5d8327-f01d-4f7a-b955-8e0b3f5897b9/1/0dvzH9k3nKtcUK_TkqLukFcYg18.mft
File:                     0dvzH9k3nKtcUK_TkqLukFcYg18.mft (raw, json)
Hash identifier:          GUccYMN7g60Ke83OIsw/K98xYFg7OhwMpgwjx5IJmLg=
Subject key identifier:   84:7B:23:32:18:D4:5B:B8:D8:57:BE:3B:AA:CB:3A:FA:2E:39:6B:8D
Authority key identifier: D1:DB:F3:1F:D9:37:9C:AB:5C:50:AF:D3:92:A2:EE:90:57:18:83:5F
Certificate issuer:       /CN=d1dbf31fd9379cab5c50afd392a2ee905718835f
Certificate serial:       019C42B479D81CF2C9A4C246CFB71BC06E79
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0dvzH9k3nKtcUK_TkqLukFcYg18.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/5d8327-f01d-4f7a-b955-8e0b3f5897b9/1/0dvzH9k3nKtcUK_TkqLukFcYg18.mft
Manifest number:          1327
Signing time:             Mon 09 Feb 2026 14:00:49 +0000
Manifest this update:     Mon 09 Feb 2026 14:00:49 +0000
Manifest next update:     Tue 10 Feb 2026 14:00:49 +0000
Files and hashes:         1: 0dvzH9k3nKtcUK_TkqLukFcYg18.crl (hash: L7stuN3Mp8wGRym7DMRcEdL1cyNsB9Ws03PUuFi/rCw=)
                          2: vTP-a1JInjsi0zs43YUjMr0tQhw.roa (hash: AksN4qlHwN45fSCKy9ilLdGULzgppZOt64KCaKI1vlk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/5d8327-f01d-4f7a-b955-8e0b3f5897b9/1/0dvzH9k3nKtcUK_TkqLukFcYg18.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/5d8327-f01d-4f7a-b955-8e0b3f5897b9/1/0dvzH9k3nKtcUK_TkqLukFcYg18.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0dvzH9k3nKtcUK_TkqLukFcYg18.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:b4:79:d8:1c:f2:c9:a4:c2:46:cf:b7:1b:c0:6e:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1dbf31fd9379cab5c50afd392a2ee905718835f
        Validity
            Not Before: Feb  9 14:00:49 2026 GMT
            Not After : Feb 10 14:00:49 2026 GMT
        Subject: CN=847b233218d45bb8d857be3baacb3afa2e396b8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:45:fe:f5:f5:4d:63:86:90:5a:6a:be:b3:c3:
                    21:34:81:11:0e:bc:be:53:3e:39:6a:04:ac:90:17:
                    d0:10:09:01:df:03:72:7e:b6:bd:a4:58:12:4f:8c:
                    35:73:f3:37:ba:f7:c8:b9:35:e4:dd:80:3a:03:c1:
                    95:ba:6f:73:3e:72:53:4f:97:b3:52:82:99:2f:d0:
                    1f:17:f2:b0:ba:66:3f:3f:81:2d:0c:8e:62:12:a8:
                    47:3d:18:0f:c1:e7:20:c2:e3:1c:34:14:37:76:81:
                    c3:04:39:22:d7:a8:4a:17:22:af:9d:e6:e7:18:4f:
                    47:68:53:7b:5f:c3:74:01:04:02:84:10:fd:92:c8:
                    c7:01:89:32:42:f3:5e:54:ad:d4:28:b8:c8:fd:33:
                    99:83:6e:2d:44:8b:f8:b5:b4:6c:fa:e1:cb:f6:19:
                    22:e1:e2:51:2a:aa:b2:a2:52:a4:7d:8e:24:be:fa:
                    86:a4:85:26:e1:03:c4:93:1e:91:ec:4c:fa:7a:99:
                    49:24:65:3f:44:5c:e1:c3:c0:62:54:be:4e:27:08:
                    7d:b2:09:28:79:9a:0d:41:51:88:1c:ed:23:4c:8a:
                    56:c4:15:c9:de:e0:92:00:7b:9b:6b:7a:04:72:bc:
                    09:d4:b1:b7:00:e5:43:b6:79:b0:ce:31:8e:21:e0:
                    b4:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:7B:23:32:18:D4:5B:B8:D8:57:BE:3B:AA:CB:3A:FA:2E:39:6B:8D
            X509v3 Authority Key Identifier:
                keyid:D1:DB:F3:1F:D9:37:9C:AB:5C:50:AF:D3:92:A2:EE:90:57:18:83:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0dvzH9k3nKtcUK_TkqLukFcYg18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5d8327-f01d-4f7a-b955-8e0b3f5897b9/1/0dvzH9k3nKtcUK_TkqLukFcYg18.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5d8327-f01d-4f7a-b955-8e0b3f5897b9/1/0dvzH9k3nKtcUK_TkqLukFcYg18.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:74:d5:25:2c:f0:c0:04:d1:8e:96:11:6b:07:f1:7c:e9:a7:
         1a:f4:1c:1a:93:63:93:06:47:15:d8:44:f5:3b:d0:12:9f:d4:
         ae:62:15:93:88:9b:17:4b:b8:8b:e8:5b:60:39:49:f7:b7:8d:
         b7:e1:db:4c:a1:4b:6e:1c:14:ce:8f:c5:74:84:d3:6f:a9:53:
         85:bd:2a:2d:e1:70:86:ca:16:b3:7a:99:95:f0:b2:4b:d4:21:
         17:06:f3:51:98:5e:12:dc:d2:e0:43:00:55:49:c7:a4:62:49:
         d3:f4:cb:d6:48:f2:aa:b3:4e:3d:e4:84:28:01:b6:0f:eb:5f:
         6a:19:ca:57:e3:d7:22:fb:7a:c9:ed:b8:1f:a6:98:bb:63:9b:
         0f:0b:84:79:ae:04:ad:a2:3b:e0:68:2d:ca:04:46:30:1c:76:
         d5:91:ce:cf:b1:c2:0a:90:72:18:9b:29:04:2f:9c:2e:5c:95:
         44:2f:c8:88:e5:01:d7:21:9f:8d:b0:52:c3:75:3e:60:f2:88:
         ac:cb:ea:e6:44:4c:6f:a2:70:af:17:88:e2:7a:76:27:16:fe:
         a3:23:96:0a:66:24:b4:bb:de:83:65:e4:a4:1c:69:e1:24:36:
         85:c0:5d:d0:8b:c3:c6:35:57:fa:1c:46:9a:db:e4:61:c2:42:
         2d:3f:3d:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:48:08 2026 by rpki-client